CVE CyberSecurity Database News (Page 49)

May 13, 2025 API Exploit

CVE-2025-4427 - How Attackers Can Bypass API Authentication in Ivanti Endpoint Manager Mobile 12.5.. (and Older)

Ivanti Endpoint Manager Mobile (EPMM) is widely used by companies to manage devices and enforce security. But on June 4th, 2025, a major vulnerability was

May 13, 2025

CVE-2025-32756 - Critical Stack-Based Buffer Overflow in Fortinet Appliances - Exploit Details and Practical Analysis

Overview CVE-2025-32756 is a critical stack-based buffer overflow vulnerability affecting several Fortinet security appliances, including FortiVoice, FortiRecorder, FortiMail, FortiNDR, and FortiCamera. This vulnerability can allow

May 13, 2025 RCE Exploit Java

CVE-2025-42999 - SAP NetWeaver Visual Composer Metadata Uploader – Untrusted Deserialization Vulnerability Explained

CVE-2025-42999 is a newly discovered vulnerability in SAP NetWeaver Visual Composer (VC). This vulnerability lets a user with upload permissions—sometimes even an internal or

May 12, 2025 API Mac Exploit

CVE-2025-31258 - How a macOS Sandbox Escape Was Fixed in Sequoia 15.5

In early 2025, Apple patched a serious security vulnerability impacting the macOS operating system. Tracked as CVE-2025-31258, this bug could have allowed a malicious app

May 12, 2025 Mac Safari iOS

CVE-2025-31257 - Critical Safari Crash Bug Explained, Code Samples, Exploitation, and Fixes

CVE-2025-31257 is a recently disclosed security vulnerability affecting Apple's web browser, Safari, on multiple Apple platforms—iPhone, iPad, Mac, Apple TV, Apple Watch,